The UI2.Guna.Winforms NuGet package versions 2.0.4.5 through 2.0.4.9 contain malicious code. This is a supply chain threat where the package itself is compromised with malicious functionality. No CVSS score or detailed technical exploitation information is provided.